Module Name: src
Committed By: riastradh
Date: Tue Oct 10 21:51:01 UTC 2023
Modified Files:
src/share/man/man7: hier.7
Log Message:
hier(7): Document /usr/share/certs/mozilla.
XXX pullup-10
To generate a diff of this commit:
cvs rdiff -u -r1.141 -r1.142 src/share/man/man7/hier.7
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/share/man/man7/hier.7
diff -u src/share/man/man7/hier.7:1.141 src/share/man/man7/hier.7:1.142
--- src/share/man/man7/hier.7:1.141 Sat Sep 2 17:40:45 2023
+++ src/share/man/man7/hier.7 Tue Oct 10 21:51:01 2023
@@ -1,4 +1,4 @@
-.\" $NetBSD: hier.7,v 1.141 2023/09/02 17:40:45 riastradh Exp $
+.\" $NetBSD: hier.7,v 1.142 2023/10/10 21:51:01 riastradh Exp $
.\"
.\" Copyright (c) 1990, 1993, 1994
.\" The Regents of the University of California. All rights reserved.
@@ -586,6 +586,30 @@ Architecture-independent files, mostly t
.It Pa calendar/
A variety of calendar files; see
.Xr calendar 1 .
+.It Pa certs/mozilla/
+X.509 certificates from Mozilla's curated set of certificate
+authorities (CAs),
+.Pa certdata.txt ,
+in PEM format.
+See
+.%U https://wiki.mozilla.org/CA/Included_Certificates
+for details.
+Used by
+.Xr certctl 8
+to populate OpenSSL trust anchors at
+.Pa /etc/openssl/certs .
+.Bl -tag -width "server/" -compact
+.It Pa all/
+Certificates of all CAs in Mozilla
+.Pa certdata.txt ,
+for all purposes, including CAs Mozilla may no longer trust.
+.It Pa code/
+Certificates of CAs trusted by Mozilla for code-signing.
+.It Pa email/
+Certificates of CAs trusted by Mozilla for email with S/MIME.
+.It Pa code/
+Certificates of CAs trusted by Mozilla for TLS server authentication.
+.El
.It Pa dict/
Word lists;
see
